Payflex Payment Gateway

Payflex Payment Gateway has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2024; all 2 are fixed as of September 2026. Their average CVSS score is 5.7, and the most serious one scores 6.1 out of 10. 2024 was the busiest year with 2 disclosures.

The most common weakness is Missing Authorization, behind 1 of the records (50%). Other recurring categories include Open Redirect.

Every one of the 2 issues recorded for Payflex Payment Gateway has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. Payflex Payment Gateway is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSMedium

5.7/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Payflex Payment Gateway vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.1CVE-2024-47646

Payflex Payment Gateway <= 2.6.1 - Open Redirect

Read the full analysis

Vulnerability Records

2 records


2024-09-30 00:00	Payflex Payment Gateway <= 2.6.1 - Open Redirect Payflex Payment Gateway <= 2.6.1	`CVE-2024-47646`	6.1 Medium	ardias	Yes
2024-07-10 00:00	Payflex Payment Gateway <= 2.5.0 - Missing Authorization to Order Status Update Payflex Payment Gateway <= 2.5.0	`CVE-2024-0619`	5.3 Medium	Francesco Carlucci	Yes

Showing 1–2 of 2 reports

Latestv2.7.1

Payflex Payment Gateway

Author

tomlister

2.0(4)

40/100

Last Updated

2026-08-04 (1mo ago)

Active Installs

1,000+

Downloads

38,333

Requires WP

4.4+

Requires PHP

7.4+

Tested up to

WP 7.0.4

Created

2021-10-08 (5y ago)

The Payflex extension for WooCommerce enables you to accept payments in installments via one of South Africa’s most popular payment gateways. Why choose Payflex? Give your customers a better way to pay and they’ll have more reason to buy.Payflex is proven to increase sales conversion rates and average order values.

View on WordPress.org